{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-3676",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-3676",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-05-14T19:07:19.420Z",
    "updatedAt": "2024-08-01T20:19:59.948Z",
    "importedAt": "2026-10-24T01:57:16.009Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": null,
      "summary": "The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerability that allows an unauthenticated remote attacker with a specially crafted HTTP request to create additional Encryption user accounts under the attacker's control.  These accounts are able to send spoofed email to any users within the domains configured by the Administrator.",
      "affected": [
        {
          "vendor": "Proofpoint",
          "product": "Enterprise Protection",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "8.18.6",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "patch 4868",
              "changes": [
                {
                  "at": "patch 4868",
                  "status": "unaffected"
                }
              ]
            },
            {
              "version": "8.20.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "patch 4869",
              "changes": [
                {
                  "at": "patch 4869",
                  "status": "unaffected"
                }
              ]
            },
            {
              "version": "8.20.2",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "patch 4870",
              "changes": [
                {
                  "at": "patch 4870",
                  "status": "unaffected"
                }
              ]
            },
            {
              "version": "8.20.4",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "patch 4871",
              "changes": [
                {
                  "at": "patch 4871",
                  "status": "unaffected"
                }
              ]
            },
            {
              "version": "8.21.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "patch 4871",
              "changes": [
                {
                  "at": "patch 4872",
                  "status": "unaffected"
                }
              ]
            }
          ]
        }
      ]
    }
  }
}